$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: 2EtVMcBq82FUdcgGOP3LIbffEE6GjVZsScKx1CIiec0= Subject key identifier: 78:68:24:72:CC:2F:04:FF:4C:4B:4D:CB:1F:69:D0:CD:DB:E9:B9:C3 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0775 Signing time: Thu 24 Apr 2025 21:16:51 +0000 Manifest this update: Thu 24 Apr 2025 21:16:51 +0000 Manifest next update: Thu 01 May 2025 21:16:51 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: xi+aXwnNf1E4bClr7APhFvIobRZuiHItAHe/F0HUPr4=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 0Y4V+EWkL3FbcoWlsNiGkR+IyKHT+HocUV9zzfnIVl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Apr 24 21:16:51 2025 GMT Not After : May 1 21:16:51 2025 GMT Subject: CN=680aaa43-633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:67:e3:0e:41:88:54:4c:88:8b:20:64:d4: 69:10:b3:31:21:56:58:f1:5f:ae:de:af:77:84:bf: 6d:8a:f3:f8:8d:1f:c4:86:b2:49:63:d8:22:6c:76: 2e:8c:1f:01:96:2d:4f:96:20:12:d2:7b:08:e2:22: 5a:2c:c7:89:fa:7e:b0:c7:0c:6c:68:8e:b4:89:df: 24:08:ef:65:e8:c0:72:03:11:ad:97:b0:91:6b:0c: b1:b0:2c:55:d4:b2:67:72:c3:86:2e:2f:57:9e:00: 1b:4b:57:d3:94:b3:5d:4b:7a:48:ae:38:18:22:f2: 84:8a:54:f4:3a:2c:be:fa:ec:a3:1a:b5:17:05:69: dd:74:91:cc:b1:7e:32:de:f5:a7:f8:b4:34:e5:99: 55:72:9d:77:67:ee:64:16:d3:c8:30:f1:92:7e:b3: 8e:4f:82:78:93:46:f1:07:16:23:cc:8c:57:49:a2: 95:93:cd:c7:e3:a9:3d:6c:59:58:d5:07:ba:20:10: bb:b2:ad:b5:30:d0:14:90:85:b0:59:cb:bc:61:37: d9:0f:92:e7:fb:ac:f8:04:f7:13:8d:28:48:6b:07: dd:44:c6:82:b4:63:f7:2c:78:bf:bb:2b:87:d3:b1: 14:b0:8a:d0:d4:66:e5:07:57:2d:ef:2d:b3:7a:3f: 1f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:68:24:72:CC:2F:04:FF:4C:4B:4D:CB:1F:69:D0:CD:DB:E9:B9:C3 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:81:d8:a6:b5:13:44:b8:fc:c9:e4:f4:cc:79:32:6e:01:aa: 23:63:23:74:88:15:02:1a:04:e2:6c:c0:0b:ad:a8:68:e4:4e: f7:5c:c6:c3:4e:58:1a:9a:d0:a0:11:30:b6:6c:8c:53:ce:43: 79:e5:49:ab:f7:86:e6:be:bf:c0:e0:0f:e1:21:56:12:5a:11: b6:c0:86:e5:ee:c3:5f:cb:b6:47:36:12:75:72:1d:44:d6:10: 42:10:40:d3:cd:32:d7:06:46:f0:70:b2:0a:5f:80:cc:ce:3e: 5b:f9:8e:5f:99:f8:e9:9f:a2:bc:66:e5:a8:63:35:ed:d7:bd: 23:5f:db:7f:27:3f:91:04:29:3b:9f:79:78:b5:5e:56:f4:06: 35:58:84:8d:3b:52:ca:ea:a1:5a:72:78:8e:d0:d5:c3:c2:37: 47:ed:1f:fd:6a:a9:24:a3:42:a0:ec:f6:b5:d0:48:04:95:3f: 5c:a9:d6:27:cd:02:ea:25:a8:a2:2a:db:f9:d7:4d:03:0a:55: eb:d0:98:9f:76:9d:f3:d3:bb:5f:11:03:40:41:25:66:7f:d5: 5a:08:cc:94:1d:38:61:27:8f:4c:d5:d8:d7:d1:bf:82:83:9e: 3b:60:f2:7c:cc:f1:96:88:0e:22:fa:4d:7a:c0:8f:a5:d9:7c: 26:9e:54:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNDI0MjExNjUxWhcNMjUwNTAxMjExNjUxWjAYMRYwFAYD VQQDEw02ODBhYWE0My02MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvThn4w5BiFRMiIsgZNRpELMxIVZY8V+u3q93hL9tivP4jR/EhrJJY9gibHYu jB8Bli1PliAS0nsI4iJaLMeJ+n6wxwxsaI60id8kCO9l6MByAxGtl7CRawyxsCxV 1LJncsOGLi9XngAbS1fTlLNdS3pIrjgYIvKEilT0Oiy++uyjGrUXBWnddJHMsX4y 3vWn+LQ05ZlVcp13Z+5kFtPIMPGSfrOOT4J4k0bxBxYjzIxXSaKVk83H46k9bFlY 1Qe6IBC7sq21MNAUkIWwWcu8YTfZD5Ln+6z4BPcTjShIawfdRMaCtGP3LHi/uyuH 07EUsIrQ1GblB1ct7y2zej8fMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhoJHLM LwT/TEtNyx9p0M3b6bnDMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBggdimtRNEuPzJ5PTMeTJuAaojYyN0iBUCGgTibMALraho5E73XMbD TlgamtCgETC2bIxTzkN55Umr94bmvr/A4A/hIVYSWhG2wIbl7sNfy7ZHNhJ1ch1E 1hBCEEDTzTLXBkbwcLIKX4DMzj5b+Y5fmfjpn6K8ZuWoYzXt170jX9t/Jz+RBCk7 n3l4tV5W9AY1WISNO1LK6qFacniO0NXDwjdH7R/9aqkko0Kg7Pa10EgElT9cqdYn zQLqJaiiKtv5100DClXr0Jifdp3z07tfEQNAQSVmf9VaCMyUHThhJ49M1djX0b+C g547YPJ8zPGWiA4i+k16wI+l2XwmnlSZ -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:38 2025 by rpki-client